| title | blockFileResponseAction resource type |
|---|---|
| description | Describes a response action that blocks a file from running on devices controlled by Microsoft Defender for Endpoint. |
| author | mmekler |
| ms.localizationpriority | medium |
| ms.subservice | security |
| doc_type | resourcePageType |
| ms.date | 03/06/2024 |
Namespace: microsoft.graph.security
[!INCLUDE beta-disclaimer]
Describes a response action that blocks a file from running on devices controlled by Microsoft Defender for Endpoint.
Inherits from microsoft.graph.security.responseAction.
| Property | Type | Description |
|---|---|---|
| identifier | microsoft.graph.security.fileEntityIdentifier | Unique identifier for the response action. The possible values are: sha1, initiatingProcessSHA1, sha256, initiatingProcessSHA256, unknownFutureValue. |
| deviceGroupNames | String collection | Device groups to which the actions set in the custom detection rule are applied. More information |
None.
The following JSON representation shows the resource type.
{
"@odata.type": "#microsoft.graph.security.blockFileResponseAction",
"identifier": "String",
"deviceGroupNames": [
"String"
]
}